Workflow Soluiton

 View Only
  • 1.  Securing a Decision Only Project

    Posted Sep 08, 2016 11:11 PM

    I have a Decision Only workflow project that I'd like to prevent direct access to.  By direct access I mean using a postman or other code to navigate directly to the asmx page and post in suitable xml content without an appopriate validation of who they are.

    The decision only workflow is supposed to only be accessed through another workflow via a generated integration component.

    I know I can turn on Windows Authentication and use security for this but thats a little painful as I'd need to get a token etc. 

    Are there any other solutions that are easier?



  • 2.  RE: Securing a Decision Only Project

    Posted Sep 09, 2016 09:13 AM

    Hi Lark.

    You can create an entry (input) in Decision to receive a word that will be sent by Workflow.

    In Decision you can check the word (password).

    About the send word (password) you can use a private key to send a word and a public key to view a word (password).

    If want something more simple you can use a public key in your workflow or just create a input in your decision and check de word (password).

    I sugest you use de key to improve your security comunication between Workflow and Decision.

    Note. LogicaBase.Components.Encryption.dll is very useful

    Regards.



  • 3.  RE: Securing a Decision Only Project

    Posted Sep 13, 2016 03:14 AM

    You could set the Authentication method in the Publishing tab, then use the create authentication component and pass that to your WS generator component.

    If you wanted further security use the AD components to get the user passed in and check their groups match a given one you need.

    IIS is an option - use the Authorisation rules

    Otherwise the password input is a great alternative.